Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/zw5WHYA5TDqrVNRIt5-8FVfd80s.roa
File: zw5WHYA5TDqrVNRIt5-8FVfd80s.roa (raw, json)
Hash identifier: K+1DSxDhqmdzbJYUSYY3LlUaPbN/Zqn08bbsPtcXeuM=
Subject key identifier: CF:0E:56:1D:80:39:4C:3A:AB:54:D4:48:B7:9F:BC:15:57:DD:F3:4B
Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial: 019424455122B933810062047646A71C94C2
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/zw5WHYA5TDqrVNRIt5-8FVfd80s.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57491
IP address blocks: 31.47.198.0/23 maxlen: 23
31.47.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:51:22:b9:33:81:00:62:04:76:46:a7:1c:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf0e561d80394c3aab54d448b79fbc1557ddf34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:49:31:7c:54:3c:38:8f:71:63:75:cb:f7:1a:
82:9f:40:d4:12:5f:d0:fd:5a:26:c2:84:8d:c9:c8:
58:c4:42:a6:a4:dd:99:ae:a5:54:8a:fe:12:dc:f8:
0f:89:87:cf:dc:b8:99:ec:53:f9:bf:1c:39:9a:8a:
00:53:0b:ed:fa:d2:9e:37:eb:bc:75:b7:5b:6c:25:
cb:a4:ce:a9:b6:de:74:46:2d:2f:03:16:fc:30:68:
0e:38:42:71:83:67:f8:1c:20:67:23:a9:d6:2b:8f:
70:9f:7f:36:81:4f:69:28:f4:27:c8:a5:cf:f2:2e:
85:03:7e:f3:e0:5a:80:c2:ad:40:13:98:b2:0a:b4:
18:b4:3d:c5:da:a3:1a:f6:17:92:3c:8d:cb:60:eb:
83:a0:a1:39:e8:80:8e:81:35:b1:28:cd:02:00:22:
0e:7f:fe:cb:47:75:cb:b4:25:ff:2f:0a:b9:c7:7c:
e7:66:0c:58:e0:b4:5f:7f:6e:37:0b:10:a7:1e:8e:
bf:ae:90:e7:1e:57:16:64:ce:5b:9c:67:6f:49:c0:
22:c6:8d:8b:a2:f5:3a:9a:54:f6:74:d5:f2:57:90:
71:42:a2:26:6f:27:5d:21:2c:cd:51:3a:cc:1a:d9:
fd:8c:36:86:e9:67:3a:71:b7:6b:e4:c0:e6:13:42:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0E:56:1D:80:39:4C:3A:AB:54:D4:48:B7:9F:BC:15:57:DD:F3:4B
X509v3 Authority Key Identifier:
keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/zw5WHYA5TDqrVNRIt5-8FVfd80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.198.0/23
Signature Algorithm: sha256WithRSAEncryption
31:21:8c:9b:22:59:f1:76:d4:dd:0f:6f:92:d3:56:86:d0:3e:
7e:d2:9b:8c:50:c7:bc:24:42:e1:59:30:37:6a:99:63:6d:28:
11:d1:03:a0:98:31:19:86:05:97:6e:81:5f:52:ae:af:72:8a:
c5:c1:05:30:f8:7f:5e:0c:5a:32:84:fa:8f:10:20:58:3a:c3:
b7:89:55:bc:51:ef:9c:a2:52:db:de:b8:cf:0d:57:1c:0c:cc:
a2:4f:7a:a6:67:b0:bf:76:da:6d:27:44:45:c7:55:65:57:45:
18:91:f7:c3:3b:45:bc:67:cb:80:25:9b:c9:8d:09:f3:b5:a7:
1e:63:9d:e8:a8:a6:29:88:bb:47:18:9a:d1:31:eb:50:5b:a8:
ca:01:96:0f:96:55:ad:3a:70:7e:40:1a:28:30:b8:fe:2c:c2:
d6:af:5e:2a:c6:40:0f:11:bf:76:5b:33:13:19:c3:47:1e:74:
25:66:00:d5:b9:cc:3b:53:0e:24:25:cd:e2:6d:63:37:ee:86:
33:bd:a4:ae:59:ab:75:e8:6f:f3:c6:b6:06:ad:b2:6e:fc:f4:
ec:8d:19:c5:f8:36:64:0d:8f:2c:e3:dd:e8:fb:e6:de:42:aa:
01:57:d6:b8:bb:7d:9f:1b:13:5b:3f:78:b2:88:9e:2f:dc:dd:
52:ad:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:10 2025 by rpki-client on console.sobornost.net